CVE-2008-0359

2008-01-1821:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/.

References

blogcms.com/wiki/changelog

marc.info/?l=bugtraq&m=120049816924383&w=2

secunia.com/advisories/28523

www.securityfocus.com/bid/27317

exchange.xforce.ibmcloud.com/vulnerabilities/39710

www.exploit-db.com/exploits/4919